Security on major public cloud providers: correct configuration of IAM policies, security groups, network ACLs, encryption at rest and in transit, centralized logging and monitoring, and platform-specific compliance frameworks. Includes federated identity management, S3/Blob/Cloud Storage protection, hardening of EC2/VM/Compute Engine instances, implementation of secure landing zones, and continuous configuration auditing via native tools and CSPM.